sentrik 1.5.0__tar.gz

sentrik-1.5.0/.dockerignore

@@ -0,0 +1,24 @@
+__pycache__
+*.pyc
+*.pyo
+.pytest_cache
+.mypy_cache
+.ruff_cache
+out/
+dist/
+build/
+*.egg-info
+.venv/
+venv/
+.env
+.git
+.github
+demo/
+tests/
+project_management/
+guard.spec
+scripts/
+vscode-extension/
+LICENSE_PROPRIETARY.txt
+*.md
+!README.md

sentrik-1.5.0/.github/DISCUSSION_TEMPLATE/feature-request.yml

@@ -0,0 +1,32 @@
+title: "[Feature] "
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Suggest a new feature or improvement for SENTRIK.
+  - type: textarea
+    id: description
+    attributes:
+      label: Feature description
+      description: What would you like SENTRIK to do?
+    validations:
+      required: true
+  - type: textarea
+    id: use-case
+    attributes:
+      label: Use case
+      description: How would you use this feature? What problem does it solve?
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      options:
+        - CLI
+        - Dashboard
+        - API
+        - Standards Packs
+        - CI/CD Integration
+        - DevOps Integration
+        - Governance
+        - Other

sentrik-1.5.0/.github/DISCUSSION_TEMPLATE/q-a.yml

@@ -0,0 +1,19 @@
+title: "[Q&A] "
+labels: ["question"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Ask a question about SENTRIK — installation, configuration, standards packs, CI/CD integration, or anything else.
+  - type: textarea
+    id: question
+    attributes:
+      label: Question
+      description: What would you like to know?
+    validations:
+      required: true
+  - type: textarea
+    id: context
+    attributes:
+      label: Context
+      description: Any relevant details (SENTRIK version, OS, config, error messages).

sentrik-1.5.0/.github/DISCUSSION_TEMPLATE/show-and-tell.yml

@@ -0,0 +1,14 @@
+title: "[Show] "
+labels: ["show-and-tell"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Share how you're using SENTRIK! Custom packs, CI/CD setups, interesting findings, compliance workflows — we'd love to see it.
+  - type: textarea
+    id: description
+    attributes:
+      label: What are you sharing?
+      description: Tell us about your setup, custom pack, workflow, or results.
+    validations:
+      required: true

sentrik-1.5.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,37 @@
+name: Bug Report
+description: Report a bug in SENTRIK
+title: "[Bug] "
+labels: ["bug"]
+body:
+  - type: textarea
+    id: description
+    attributes:
+      label: Bug description
+      description: What happened? What did you expect?
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Steps to reproduce
+      description: How can we reproduce this?
+      placeholder: |
+        1. Run `sentrik scan`
+        2. ...
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: SENTRIK version
+      placeholder: "1.0.0"
+  - type: input
+    id: python
+    attributes:
+      label: Python version
+      placeholder: "3.12"
+  - type: input
+    id: os
+    attributes:
+      label: Operating system
+      placeholder: "Ubuntu 22.04 / macOS 14 / Windows 11"

sentrik-1.5.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Question / Support
+    url: https://github.com/maxgerhardson/sentrik/discussions/categories/q-a
+    about: Ask questions in GitHub Discussions
+  - name: Feature Request
+    url: https://github.com/maxgerhardson/sentrik/discussions/categories/feature-requests
+    about: Suggest features in GitHub Discussions
+  - name: Documentation
+    url: https://docs.sentrik.dev
+    about: Read the documentation

sentrik-1.5.0/.github/workflows/auto-merge.yml

@@ -0,0 +1,92 @@
+name: Auto-Merge Bot PRs
+
+on:
+  pull_request_review:
+    types: [submitted]
+  check_suite:
+    types: [completed]
+  status: {}
+
+permissions:
+  contents: write
+  pull-requests: write
+  checks: read
+
+jobs:
+  auto-merge:
+    runs-on: ubuntu-latest
+    # Only run for PRs with the auto-merge label
+    if: >
+      github.event_name == 'check_suite' ||
+      github.event_name == 'status' ||
+      (github.event_name == 'pull_request_review' && github.event.review.state == 'approved')
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Find auto-merge PRs
+        id: find-prs
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          # Find open PRs with auto-merge label where all checks pass
+          prs=$(gh pr list \
+            --label "auto-merge" \
+            --state open \
+            --json number,headRefName,statusCheckRollup,labels \
+            --jq '
+              .[] |
+              select(
+                .statusCheckRollup != null and
+                (.statusCheckRollup | all(.conclusion == "SUCCESS" or .conclusion == "NEUTRAL"))
+              ) |
+              .number
+            ')
+
+          echo "prs=$prs" >> $GITHUB_OUTPUT
+          echo "Found auto-merge candidates: $prs"
+
+      - name: Merge passing PRs
+        if: steps.find-prs.outputs.prs != ''
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          for pr_number in ${{ steps.find-prs.outputs.prs }}; do
+            echo "Attempting to merge PR #$pr_number"
+
+            # Double-check all checks pass
+            checks_pass=$(gh pr checks "$pr_number" --json bucket \
+              --jq '[.[] | select(.bucket != "pass" and .bucket != "skip")] | length')
+
+            if [ "$checks_pass" = "0" ]; then
+              gh pr merge "$pr_number" \
+                --squash \
+                --auto \
+                --delete-branch \
+                --subject "auto-merge: PR #$pr_number" || \
+              echo "Failed to merge PR #$pr_number — may need manual review"
+            else
+              echo "PR #$pr_number has failing checks, skipping"
+            fi
+          done
+
+
+  # Notify Telegram on merge
+  notify:
+    needs: auto-merge
+    runs-on: ubuntu-latest
+    if: success()
+    steps:
+      - name: Send Telegram notification
+        env:
+          BOT_TOKEN: ${{ secrets.SENTRIK_BOT_TOKEN }}
+          CHAT_ID: ${{ secrets.SENTRIK_CHAT_ID }}
+        run: |
+          if [ -n "$BOT_TOKEN" ] && [ -n "$CHAT_ID" ]; then
+            curl -s -X POST \
+              "https://api.telegram.org/bot${BOT_TOKEN}/sendMessage" \
+              -d chat_id="$CHAT_ID" \
+              -d parse_mode="Markdown" \
+              -d text="✅ *Auto-merged* PR from automation pipeline. Main branch updated and deployed."
+          fi

sentrik-1.5.0/.github/workflows/docs.yml

@@ -0,0 +1,36 @@
+name: Deploy Docs
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "docs/**"
+      - "mkdocs.yml"
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install MkDocs Material
+        run: pip install mkdocs-material
+
+      - name: Build docs
+        run: mkdocs build --strict
+
+      - name: Deploy to sentrik-docs repo
+        uses: peaceiris/actions-gh-pages@v4
+        with:
+          personal_token: ${{ secrets.DOCS_DEPLOY_TOKEN }}
+          external_repository: maxgerhardson/sentrik-docs
+          publish_branch: gh-pages
+          publish_dir: ./site
+          commit_message: "docs: deploy from sentrik@${{ github.sha }}"

sentrik-1.5.0/.github/workflows/guard-gate.yml

@@ -0,0 +1,79 @@
+name: Sentrik Gate
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  sentrik-gate:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # Full history for git range
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip setuptools
+          pip install -e ".[dev]"
+
+      - name: Run tests with coverage
+        run: pytest --junitxml=out/test-results.xml
+
+      - name: Validate config
+        run: sentrik validate-config
+
+      - name: Run sentrik gate on PR changes
+        if: github.event_name == 'pull_request'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GUARD_GITHUB_OWNER: ${{ github.repository_owner }}
+          GUARD_GITHUB_REPO: ${{ github.event.repository.name }}
+        run: sentrik gate --git-range "origin/main...HEAD" --decorate-pr --status-check
+
+      - name: Run sentrik gate (full scan)
+        if: github.event_name == 'push'
+        run: sentrik gate
+
+      - name: Generate SARIF report
+        if: always()
+        run: sentrik scan --git-range "origin/main...HEAD" 2>/dev/null || true
+        env:
+          GUARD_PROVIDER: stub
+
+      - name: Upload SARIF to GitHub Code Scanning
+        uses: github/codeql-action/upload-sarif@v3
+        if: always()
+        continue-on-error: true
+        with:
+          sarif_file: out/findings.sarif
+
+      - name: Upload test results
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: test-results
+          path: out/test-results.xml
+
+      - name: Upload sentrik reports
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: sentrik-reports
+          path: out/
+
+      - name: Sync work items to GitHub Issues
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GUARD_DEVOPS_PROVIDER: github
+          GUARD_GITHUB_OWNER: ${{ github.repository_owner }}
+          GUARD_GITHUB_REPO: ${{ github.event.repository.name }}
+        run: sentrik sync

sentrik-1.5.0/.github/workflows/release.yml

@@ -0,0 +1,88 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+  packages: write
+
+jobs:
+  # -----------------------------------------------------------------------
+  # Binary: matrix build (Linux, macOS x64, macOS arm64, Windows)
+  # -----------------------------------------------------------------------
+  binary:
+    strategy:
+      matrix:
+        include:
+          - os: ubuntu-latest
+            artifact: sentrik-linux-x64
+            binary: dist/sentrik
+          - os: macos-latest
+            artifact: sentrik-darwin-x64
+            binary: dist/sentrik
+          - os: macos-14
+            artifact: sentrik-darwin-arm64
+            binary: dist/sentrik
+          - os: windows-latest
+            artifact: sentrik-win32-x64.exe
+            binary: dist/sentrik.exe
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: |
+          pip install -e ".[dev]"
+          pip install pyinstaller
+
+      - name: Build binary
+        run: python -m PyInstaller guard.spec
+
+      - name: Smoke test
+        run: ${{ matrix.binary }} --help
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.artifact }}
+          path: ${{ matrix.binary }}
+
+  # -----------------------------------------------------------------------
+  # Release: create GitHub Release with platform binaries
+  # -----------------------------------------------------------------------
+  release:
+    needs: [binary]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: release-artifacts
+
+      - name: Rename binaries for platform identification
+        run: |
+          mkdir -p release-binaries
+          cp release-artifacts/sentrik-linux-x64/sentrik release-binaries/sentrik-linux-x64
+          cp release-artifacts/sentrik-darwin-x64/sentrik release-binaries/sentrik-darwin-x64
+          cp release-artifacts/sentrik-darwin-arm64/sentrik release-binaries/sentrik-darwin-arm64
+          cp release-artifacts/sentrik-win32-x64.exe/sentrik.exe release-binaries/sentrik-win32-x64.exe
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          files: |
+            release-binaries/sentrik-linux-x64
+            release-binaries/sentrik-darwin-x64
+            release-binaries/sentrik-darwin-arm64
+            release-binaries/sentrik-win32-x64.exe

sentrik-1.5.0/.gitignore

@@ -0,0 +1,42 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+dist/
+build/
+.eggs/
+*.egg
+.pytest_cache/
+out/
+.venv/
+site/
+.coverage
+.env
+.sentrik/local/
+~$*
+_dash_debug.*
+
+# Root-level screenshots (not source code)
+/*.png
+
+# VS Code extension build artifacts
+vscode-extension/node_modules/
+vscode-extension/*.vsix
+vscode-extension/package-lock.json
+
+# npm binary
+npm-package/bin/
+
+# License server
+license-server/
+
+# Frontend build
+frontend/node_modules/
+frontend/dist/
+
+# Automation pipeline
+automation/logs/
+automation/e2e/node_modules/
+automation/e2e/test-results/
+automation/e2e/report/
+automation/e2e/screenshots/
+automation/.env

sentrik-1.5.0/.guard.yaml

@@ -0,0 +1,102 @@
+output_dir: out
+standards_file: examples/sample_standards.yaml
+work_items_file: examples/sample_work_items.json
+llm_enabled: false
+llm_provider: stub
+llm_model: ''
+llm_base_url: ''
+confidence_scoring_enabled: false
+confidence_scoring_max_findings: 50
+provider: stub
+sarif_files: []
+reporters: []
+cache_enabled: false
+cache_dir: .guard_cache
+gate_fail_on:
+- critical
+- high
+devops_provider: github
+azure_devops_org: ''
+azure_devops_project: ''
+azure_devops_team: ''
+azure_devops_iteration: ''
+azure_devops_repo: ''
+azure_devops_work_item_type: Issue
+azure_devops_work_item_types: []
+jira_issue_types: []
+standards_provider: stub
+azure_devops_standards_repo: ''
+azure_devops_standards_file: standards.yaml
+github_owner: ''
+github_repo: ''
+github_label: ''
+github_milestone: ''
+github_standards_repo: ''
+github_standards_file: standards.yaml
+github_standards_ref: main
+jira_base_url: ''
+jira_project_key: ''
+jira_jql: ''
+jira_standards_issue_key: ''
+standards_packs:
+- fda-iec-62304
+- soc2
+- owasp-top-10
+pack_overrides: {}
+severity_rescoring_enabled: false
+ml_severity_enabled: false
+parallel_scan: false
+max_workers: 4
+agent_scan: false
+agent_max_concurrency: 0
+governance:
+  profile: standard
+license_key: ''
+auth: {}
+scan_exclude: []
+suppressions: []
+oauth: {}
+async_approval: {}
+notifications:
+  slack_webhook_url: ''
+  teams_webhook_url: ''
+  notify_on:
+  - gate_failed
+online_license_check: true
+portal_url: https://portal.sentrik.dev
+requirements_output_file: requirements.yaml
+cpp_analysis_enabled: false
+cpp_analysis_tool: clang-tidy
+cpp_analysis_checks: ''
+grc_webhook_url: ''
+grc_platform: generic
+grc_events: []
+requirement_coverage_enabled: false
+requirement_coverage_exclude:
+- tests/*
+- test_*
+- '*.md'
+- '*.txt'
+- '*.yaml'
+- '*.yml'
+- '*.json'
+- '*.toml'
+- '*.cfg'
+- '*.ini'
+- '*.lock'
+- __init__.py
+- __pycache__/*
+- '*.pyc'
+- '*.pyo'
+- '*.db'
+- '*.db-shm'
+- '*.db-wal'
+- '*.sqlite*'
+- out/*
+- dist/*
+- build/*
+- '*.egg-info/*'
+- '*.patch'
+- '*.html'
+- '*.css'
+- '*.min.*'

sentrik-1.5.0/.mcp.json

@@ -0,0 +1,9 @@
+{
+  "mcpServers": {
+    "sentrik": {
+      "command": "sentrik",
+      "args": ["mcp-server"],
+      "description": "Sentrik governance — scan, gate, and trace compliance for AI-generated code"
+    }
+  }
+}

sentrik-1.5.0/.pre-commit-config.yaml

@@ -0,0 +1,9 @@
+repos:
+  - repo: local
+    hooks:
+      - id: guard-scan
+        name: AI SDLC Guard scan
+        entry: guard scan --staged
+        language: system
+        pass_filenames: false
+        always_run: true